4 ms·
>> This could happen when the TPM device is reset or replaced. Isn’t that exactly the desired behavior to defend against physical attacks?
by abtinf 9mo ago
>> This could happen when the TPM device is reset or replaced.
Isn’t that exactly the desired behavior to defend against physical attacks?
- horsawlarway 9mo agoSure, but most users probably don't actually want this level of defense. For the same reason that most folks don't use bank vault doors on their house. Ex - even reasonably technical people hit this footgun in lots of edge cases... like updating their bios, changing the host of a vm running the tool, or having a k8s pod get scheduled on a different node. I'm surprised this was "default on" at all.
- SchemaLoad 9mo agoYes, but it turns out the TPM gets reset quite often on shitty hardware.